CVE-2022-24409
First published: Wed Feb 23 2022(Updated: )
Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell BSAFE SSL-J | >=6.1.0<6.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-24409?
CVE-2022-24409 is a vulnerability in Dell BSAFE SSL-J that allows malicious users to exploit a covert timing channel and compromise the affected system.
What is the severity of CVE-2022-24409?
The severity of CVE-2022-24409 is high with a CVSS score of 7.5.
How can I fix CVE-2022-24409?
To fix CVE-2022-24409, customers with active BSAFE maintenance contracts should refer to the Dell support website for the security update.
Who can receive details about CVE-2022-24409?
Only customers with active BSAFE maintenance contracts can receive details about CVE-2022-24409.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-24409?
The Common Weakness Enumeration (CWE) ID for CVE-2022-24409 is 385.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell bsafe ssl-j
- version/dell bsafe ssl-j/6.1.0